Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/721/EE9OhN5xsAlau_Lyp3e3thEbIjU.roa
File: EE9OhN5xsAlau_Lyp3e3thEbIjU.roa (raw, json)
Hash identifier: llrYVjziqz2XWl6Gl2y46w/cu1/VKeW+C6VxIx3ojNA=
Subject key identifier: 10:4F:4E:84:DE:71:B0:09:5A:BB:F2:F2:A7:77:B7:B6:11:1B:22:35
Certificate issuer: /CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Certificate serial: 076B
Authority key identifier: EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/EE9OhN5xsAlau_Lyp3e3thEbIjU.roa
Signing time: Tue 07 Jun 2022 02:16:40 +0000
ROA not before: Tue 07 Jun 2022 02:16:40 +0000
ROA not after: Fri 02 Jun 2023 05:30:26 +0000
asID: 134764
IP address blocks: 43.255.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE887ACC7CE4B5F66CCF4946F02BFACBDE28B76A
Validity
Not Before: Jun 7 02:16:40 2022 GMT
Not After : Jun 2 05:30:26 2023 GMT
Subject: CN=104F4E84DE71B0095ABBF2F2A777B7B6111B2235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:8d:76:5f:7a:c9:ce:46:e8:4e:05:3d:e1:
01:1e:49:9d:73:35:c1:cf:49:fa:33:48:cd:70:6f:
f2:43:b7:2b:35:e9:e9:02:32:56:8c:f8:95:5d:d1:
14:57:6d:cb:3d:55:c3:e7:e4:1b:8b:6d:c9:4a:1d:
ca:84:f4:e2:86:26:75:6d:d4:01:db:0f:15:ec:31:
ef:4b:90:13:96:1f:0d:72:b7:19:ff:ac:74:d5:36:
6e:63:72:73:0d:1f:d4:04:4d:da:de:15:90:1d:97:
55:6d:be:d1:34:c6:6e:3d:1f:43:ed:47:31:09:0a:
3d:0c:8f:8d:ce:4a:16:b1:25:54:ae:25:2d:c6:e0:
ea:a7:de:8e:08:71:30:d0:1d:d8:88:96:f2:d9:9b:
db:c0:f5:95:5a:17:29:db:e7:a6:75:ac:ff:80:32:
d0:b1:86:44:00:8f:d5:57:e4:c3:be:3b:b7:0c:7c:
b8:73:0f:77:63:0c:28:05:bc:c2:a0:c5:1d:0f:48:
9f:da:23:06:95:c2:18:23:5a:49:77:90:20:96:c6:
e3:4b:8f:38:b2:fa:11:53:fc:4c:7d:31:63:8a:cc:
18:11:56:20:96:6d:09:f1:1b:69:e4:e6:b4:fd:7c:
ea:25:89:e2:eb:5e:62:a3:7e:a3:21:a1:26:67:b2:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:4E:84:DE:71:B0:09:5A:BB:F2:F2:A7:77:B7:B6:11:1B:22:35
X509v3 Authority Key Identifier:
keyid:EE:88:7A:CC:7C:E4:B5:F6:6C:CF:49:46:F0:2B:FA:CB:DE:28:B7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/7oh6zHzktfZsz0lG8Cv6y94ot2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/7oh6zHzktfZsz0lG8Cv6y94ot2o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/721/EE9OhN5xsAlau_Lyp3e3thEbIjU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
53:9c:d4:16:34:24:b1:23:31:75:ee:1d:1e:aa:38:3c:93:02:
b1:96:e6:4b:00:b2:32:da:a8:63:c0:fa:2d:46:a9:35:2f:c4:
63:b0:e5:a0:08:b6:f2:e4:78:4d:fc:ba:a5:38:04:5d:2b:80:
0d:79:57:61:92:45:11:6c:e9:50:cf:5a:8e:78:fe:b7:4f:b4:
13:59:99:33:c0:8e:56:ee:a5:f4:38:d8:bc:66:a8:af:eb:97:
cc:5e:74:ee:06:b2:f8:9c:e5:82:13:f9:ef:56:fb:b9:21:62:
b8:ed:a2:21:dd:23:21:d3:c9:2e:89:9e:35:fc:08:aa:aa:bc:
2d:8a:17:cd:4c:14:16:cf:0f:71:17:84:a2:42:a1:08:52:99:
b1:99:cb:4e:ee:19:03:ba:5d:5a:de:db:d4:11:27:14:3d:40:
b0:e1:74:6b:ae:c1:6a:a6:42:35:1f:db:2f:f9:83:85:b2:4b:
8b:60:14:30:09:14:f6:16:22:47:6c:9e:de:76:56:56:4d:9c:
62:9c:c3:26:08:97:0e:a8:9a:10:b7:98:59:5e:1e:24:61:84:
04:bb:78:c4:eb:33:82:eb:8d:e8:9e:7e:24:78:0d:21:31:33:
be:e3:8c:37:38:d7:ab:77:e5:2f:a5:86:19:d6:70:7c:94:1a:
31:4e:68:82
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICB2swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUU4
ODdBQ0M3Q0U0QjVGNjZDQ0Y0OTQ2RjAyQkZBQ0JERTI4Qjc2QTAeFw0yMjA2MDcw
MjE2NDBaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDEwNEY0RTg0REU3MUIw
MDk1QUJCRjJGMkE3NzdCN0I2MTExQjIyMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDliY12X3rJzkboTgU94QEeSZ1zNcHPSfozSM1wb/JDtys16ekC
MlaM+JVd0RRXbcs9VcPn5BuLbclKHcqE9OKGJnVt1AHbDxXsMe9LkBOWHw1ytxn/
rHTVNm5jcnMNH9QETdreFZAdl1VtvtE0xm49H0PtRzEJCj0Mj43OShaxJVSuJS3G
4Oqn3o4IcTDQHdiIlvLZm9vA9ZVaFynb56Z1rP+AMtCxhkQAj9VX5MO+O7cMfLhz
D3djDCgFvMKgxR0PSJ/aIwaVwhgjWkl3kCCWxuNLjziy+hFT/Ex9MWOKzBgRViCW
bQnxG2nk5rT9fOolieLrXmKjfqMhoSZnsvQpAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUEE9OhN5xsAlau/Lyp3e3thEbIjUwHwYDVR0jBBgwFoAU7oh6zHzktfZsz0lG
8Cv6y94ot2owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIx
LzdvaDZ6SHprdGZac3owbEc4Q3Y2eTk0b3Qyby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvN29oNnpIemt0ZlpzejBsRzhDdjZ5OTRvdDJvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzIxL0VFOU9oTjV4c0FsYXVf
THlwM2UzdGhFYklqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIr/9QwDQYJKoZIhvcNAQELBQADggEBAFOc1BY0JLEjMXXuHR6qODyTArGW5ksA
sjLaqGPA+i1GqTUvxGOw5aAItvLkeE38uqU4BF0rgA15V2GSRRFs6VDPWo54/rdP
tBNZmTPAjlbupfQ42LxmqK/rl8xedO4Gsvic5YIT+e9W+7khYrjtoiHdIyHTyS6J
njX8CKqqvC2KF81MFBbPD3EXhKJCoQhSmbGZy07uGQO6XVre29QRJxQ9QLDhdGuu
wWqmQjUf2y/5g4WyS4tgFDAJFPYWIkdsnt52VlZNnGKcwyYIlw6omhC3mFleHiRh
hAS7eMTrM4LrjeiefiR4DSExM77jjDc416t35S+lhhnWcHyUGjFOaII=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org